CVE-2012-3838 | BDVDB-2026-50818 Detail

Description#

Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/babygekko/index.php or (2) templates/html5demo/index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5086.php
http://www.exploit-db.com/exploits/18827
http://www.babygekko.com/site/news/general/baby-gekko-v1-2-0-released-with-3rd-party-independent-security-testing-performed-by-zero-science-lab.html

Exploit#

http://www.exploit-db.com/exploits/18827

History#

Version 12012-07-03Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.